HTTP: Script in CHANNEL Tag

This signature detects attempts to exploit the cross-domain vulnerability in Microsoft Internet Explorer. Attackers can create a malicious Web page that, when viewed by a user subscribed to an MSN channel, enables them to obtain information, remotely execute arbitrary code, or take complete control of the target system.

Extended Description

A vulnerability has been reported in Microsoft Internet Explorer that could enable unauthorized access by malicious scripts and Active Content to document properties across different Security Zones and foreign domains. This issue is exposed when a remote site uses the 'AddChannel' method to add a channel. Exploitation of this issue could allow various attacks, such as cookie-theft from an arbitrary domain. Other issues may also facilitate execution of arbitrary code on a vulnerable client system by causing malicious content to be stored on the victim system and then referenced.

Affected Products

Nortel_networks symposium_web_client

References

BugTraq: 12427

CVE: CVE-2005-0056

URL: http://www.kb.cert.org/vuls/id/823971 http://www.microsoft.com/technet/security/bulletin/ms05-014.mspx

Short Name

HTTP:STC:IE:CHAN-SCRIPT

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Script in CHANNEL Tag

Extended Description

Affected Products

References

Found a potential security threat?